Templates / Template C

Template C - Risk Bottleneck Field Guide

Show expensive failure is uneven and put review time on the bottlenecks that dominate risk.

Studio draft. The shape is the point; the live article is aerospace-engineering (how it was made).

A B C D E F G

Template C Exemplar Pipeline

80/20 Rule in Aerospace Engineering

SEO intent: Where Aerospace Project Risk Concentrates
Source article authors: ChatGPT-4o, Claude Sonnet 5, ChatGPT-5.5
Evidence tier: 1 (standards) + 2 (protocol) · Brief: briefs/aerospace-engineering.md

In aerospace, the expensive failure is rarely “everything went wrong.” It is usually a few kilograms that erased mass margin, one late avionics supplier, one open certification finding, or one interface nobody owned until integration day.

That is the 80/20 rule in aerospace engineering: review time should follow consequence, not the length of the register. This field guide shows where unequal attention earns its keep, from mass margin to interfaces and verification. The same logic appears in project management.

Mass: a few line items consume most margin

Mass touches propulsion, structure, fuel burn, center of gravity, and performance. Late growth is especially punishing for rockets and spacecraft; NASA’s K-12 explainer of the rocket equation makes the amplification intuitive even without deriving it.

Propulsion, structure, batteries, and payload may be a small share of the subsystem list while dominating remaining mass-margin pressure. When the same few line items grow at every design review, review those consumers weekly rather than giving every row equal time.

Interfaces: a few boundaries create most integration risk

Unit tests can pass while integration fails — timing, pinout, voltage, message format, coordinate conventions. Interface Control Documents (ICDs) exist to make ownership and assumptions explicit.

Five interfaces crossing payload, power, thermal, flight software, and ground can dominate risk among sixty documented interfaces. Changing requirements, multiple owners, new technology, and poor test coverage identify the unstable boundaries. Review those weekly; let mature interfaces move on a slower loop.

Certification: a few requirements create most late pain

Verification evidence is cheaper to plan during design than to reconstruct after freeze. Map every requirement to test, analysis, inspection, or demonstration. Incomplete mapping at PDR is future schedule risk in the orphaned rows.

Safety-critical software makes unequal attention explicit: DO-178C ties assurance rigor to failure severity (see RTCA standards for the DO-178 family). Process quality frameworks such as AS9100 push similar discipline. The point is not worship of standards — it is identifying which requirements carry the most safety and certification consequence.

Software programs already measure the skew. Microsoft’s early-2000s reliability work, described by then-CEO Steve Ballmer, found that about 20% of bugs caused about 80% of errors and crashes (and about 1% caused roughly half), as reported by CRN in 2002. Flight software verification should chase that same shape: the few high-severity paths, not equal polish on every line.

A small fraction of requirements can drive most certification concern. “Verify later” with no proof path is the warning. Count high-criticality requirements with no method or owner and put that number on the dashboard before re-reading the full requirements book.

FMEA: reliability risk is already ranked — obey it

FMEA / FMECA exist because failure severity is uneven. Joseph Juran’s quality work popularized Pareto thinking as the “vital few” versus the “useful many”: in production problems, roughly 80% of defects often trace to about 20% of causes — the pattern behind Pareto charts in quality control and Six Sigma practice (see overviews such as the Pareto principle entry on Juran’s application). If test hours ignore the current top modes, the FMEA is theater.

Reaction wheels, batteries, deployables, and flight software may dominate mission-loss concern on a smallsat parts list. If the FMEA is complete but test priorities never change after a design shift, compare the top-ranked modes with this month's test plan.

Related ranking lesson: 80/20 in quality control.

Long-leads and scarce specialists freeze the schedule

Engines, certified boxes, rad-hard parts, composites, test slots — a small BOM fraction can own the critical path. Programs stall less from “general staffing” than from one certification lead or DO-178C verifier unavailable at a gate.

A few suppliers and roles can account for most credible slip scenarios. No backup, no substitute, and no early decision date are the warning signs. List the ten longest lead times and five least-redundant specialists, then assign mitigation owners.

See also supply chain and risk management.

Keep the top ten risks impossible to miss

Illustrative program composite — notional smallsat avionics effort. Use the shape; replace rows with your real top risks.

#Risk (concentrated)ClassWeekly ask
1Battery + structure mass growth eating ΔV marginMassFive largest margin consumers
2Payload–FSW message timing still “TBD”ICDLock timing + owner
3Flight-critical SW reqs with no verification methodCertificationOrphan count on dashboard
4DO-178C evidence path unclear for two DAL itemsCertificationMethod + facility + date
5Reaction-wheel failure modes not mirrored in vibe testFMEAAlign test hours to top modes
6Deployable mechanism single-stringFMEAContingency / inspect plan
7Rad-hard processor 26-week lead, no altSupplierOrder / qualify alternate
8Thermal-vac chamber slot slipsSupplierReserve + backup facility
9Only one person can sign SW verificationSpecialistDeputy + criteria doc
10Unstable power–payload ICD (voltage + connector)ICDWeekly until frozen

An 80-row full log can stay on file. Leadership’s weekly attention belongs on a short ranked list like this. That unequal attention is the 80/20 move. The table is enough - do not add a filler bar chart of the same rows.

Checklist for the vital few

AreaWarningCadenceMitigation
MassSame subsystems eat marginWeeklyTrade early; escalate late growth
ICDsUnclear ownership / changing reqsWeekly if unstableLock formats, timing, change control
VerificationNo method / evidenceEach design reviewMap method + owner
FMEATop modes ≠ testsAfter design changesRe-rank; shift hours
SuppliersLong-lead, no backupWeekly on pathAlternates; early order
SpecialistsSingle approverNear gates: weeklyDeputy; schedule early

8020 move: Build your real top-10 this week; review it before the full log.

Misreads that look like diligence

“Equal ICD review is fair.”
Fairness is not the metric. Mature off-the-shelf boundaries do not deserve the same weekly oxygen as a new payload–FSW interface still marked TBD.

“The FMEA is done, so reliability is covered.”
If vibe/thermal/test hours ignore the current top modes, the document is theater. Ranking without resource shift is cargo-cult risk management.

“We discuss the full risk log every quarter — that is thorough.”
Thoroughness without ranking is how the vital few stay invisible. A short list reviewed weekly beats eighty rows reviewed rarely.

Focus review time where programs break

Find the vital few inside mass, ICDs, certification evidence, FMEA rankings, long-leads, and specialists. Make them impossible to miss weekly. Leave the long tail visible but unequally attended.

Sources

  • NASA GRC, Rocket equation explainer.
  • RTCA, standards (DO-178 family).
  • SAE, AS9100D.
  • Top-10 register: Illustrative program composite, not a flight program dataset.
  • Juran “vital few” / quality Pareto — summarized under the Pareto principle.
  • Ballmer/Microsoft ~20% bugs → ~80% errors — CRN (2002).